homepage-cryptoto-cm-com.square.site
Category: Phishing
To use full-featured product, you have to purchase a license for Combo Cleaner. Limited seven days free trial available. Combo Cleaner is owned and operated by RCS LT, the parent company of PCRisk.com.
Description of homepage-cryptoto-cm-com.square.site
This domain appears to be a page hosted on Square's website-building platform under the square.site subdomain space rather than an official standalone corporate domain. Based on the page title, domain string, and screenshot, it presents itself as a "Crypto.com Login" page and displays branding associated with the Crypto.com cryptocurrency platform, including a login-themed interface and QR-code prompt.
The site does not appear to represent a normal Square merchant storefront. Instead, it appears to be a branded landing page imitating a cryptocurrency account-access page. The combination of a third-party hosted subdomain, the use of another company's branding, and the login-focused presentation suggests the page may be intended to capture user trust by resembling a legitimate financial or cryptocurrency service.
Safety Assessment for homepage-cryptoto-cm-com.square.site
This domain was flagged by 17 out of 91 security engines at the time of this scan, with the detections largely classifying it as phishing or otherwise malicious. In addition, one threat database listing was present, and the screenshot shows the page using Crypto.com branding on a Square-hosted subdomain rather than on an official Crypto.com web address. That mismatch is a strong warning sign and may indicate an attempt to imitate a known cryptocurrency service.
The malware scan did not report confirmed malicious files, but it did attach a generic suspicious heuristic to the domain and several linked assets. Generic heuristic findings alone are low-confidence, but in this case they are outweighed by the broader multi-engine phishing consensus and the visible brand imitation pattern. The domain's IP address is also listed on one mail-reputation blocklist, which is a weaker signal and not, by itself, proof of website abuse.
Based on these findings, this website may pose potential risks to visitors.
Technical Description
The site appears to be hosted by Weebly/Square infrastructure and served through a Cloudflare-fronted web server. It presents a valid Let's Encrypt SSL certificate expiring in 2026, which indicates encrypted transport was available at the time of the scan, though HTTPS alone does not verify legitimacy. The domain is relatively old for a suspicious page, but it is a hosted subdomain rather than an independently branded primary domain.
DNSSEC appears to be unsigned, and the nameservers point to AWS-managed DNS. No confirmed malware payloads were identified in the limited file scan, but the use of a third-party site-builder subdomain for a cryptocurrency login page is a notable technical and trust concern.
Share your experience with this website. Was it safe? Did you encounter any issues?